Crypto Coalition Unveils Plan to Mitigate Aave Token Exploit
Typically, a $300 million shortfall doesn't come with a straightforward fix. However, DeFi United is attempting to create a repair plan to address the issue. The coalition has outlined a detailed, step-by-step proposal to restore the backing of rsETH following the Kelp DAO hack, which released over 116,000 unaccounted-for tokens and disrupted DeFi lending markets. The plan, shared on Aave's official X account, resembles a coordinated cleanup effort, relying heavily on Aave's infrastructure to rectify the damage and stabilize the markets. The incident occurred on April 18 when an attacker exploited a vulnerability in rsETH's bridge, forging a message that appeared legitimate and tricking the Ethereum side of the system into releasing 116,500 rsETH without proper backing. These tokens were then spread across multiple wallets and deployed in DeFi, with a significant portion used as collateral on Aave and other lending platforms. As a result, protocols like Aave found themselves holding collateral that wasn't fully backed, creating a systemic problem. According to the proposal, most of the exploited funds remain active, with approximately 107,000 of the original 116,500 rsETH still tied up in positions across Aave and Compound. DeFi United's proposal aims to address both the restoration of rsETH's backing and the unwinding of loans created using the extra tokens. The group claims to have secured enough ETH commitments to fully re-collateralize rsETH and plans to feed this ETH back into the system in stages. Meanwhile, the proposal focuses on carefully unwinding the mess in the lending markets. This involves dealing with the positions the attacker opened on Aave, which are essentially loans backed by rsETH that shouldn't have existed. Rather than allowing these loans to collapse chaotically, the proposal suggests temporarily adjusting how rsETH is valued inside the system to enable smoother liquidation or closure of these positions. As these positions are unwound, the underlying assets can be recovered, potentially freeing up around 13,000 ETH from Aave. Once this collateral is recovered, it will be converted into ETH and used to cover the shortfall created by the exploit. Although the process carries risks, it represents a more coordinated response than DeFi has often managed previously. If executed successfully, the plan aims to fully restore rsETH backing and stabilize all affected markets.